Privacy Policy
Last updated: October 2026
What we collect
Account details you provide (email, name, OAuth identifiers) and the scripts you submit for auditing. We also collect anonymous usage analytics to improve the Service.
How we use your data
We use submitted scripts solely to generate your compliance report. Aggregated, de-identified patterns may inform detection improvements. We do not sell your data.
Data retention
Scripts are stored only as long as needed to display your history — you can delete them at any time from your workspace. Account data is retained while your account is active.
Security
Data is encrypted in transit (TLS) and at rest. Access is limited to authorized personnel. No system is 100% secure; we recommend using a strong, unique password.
Third-party providers
We use trusted providers for authentication (Google, TikTok, Amazon), analytics, and payment processing. Each provider handles data under their own privacy policy.
Data sharing, transfer and disclosure
We do not sell, rent, or trade your personal data or Google user data to third parties. We share data only in these limited circumstances: (a) with cloud infrastructure providers (Supabase for database hosting, Vercel for application hosting, and Amazon Web Services for email delivery) solely to operate the Service — these providers act as data processors under contractual obligations and may not use your data for their own purposes; (b) with AI model providers (Anthropic, Google Vertex AI) when you submit a script for auditing — only the script text is sent, never your Google account data or OAuth tokens; (c) when required by law, regulation, or valid legal process; (d) to protect the rights, safety, or property of BanProof AI, its users, or the public. Google user data (OAuth tokens, channel ID, channel name) is never shared with, transferred to, or disclosed to any third party. It is used exclusively within BanProof to publish content you have composed and approved to your own YouTube channel.
Google user data
When you connect a Google account, we request only the permissions needed to publish on your behalf: youtube.upload to upload the video you composed to your own channel, and youtube.readonly to read back which channel that is, so the app can show you where a post is going. We store your channel ID, channel name and avatar, and the access and refresh tokens needed to upload. We do not read your videos, comments, subscribers or analytics, and we never upload anything you did not compose and approve in BanProof. BanProof AI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
YouTube API Services
BanProof AI uses YouTube API Services. By connecting a YouTube channel you agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. You can revoke BanProof AI's access to your YouTube data at any time from your Google account permissions page or from Google security settings. Disconnecting the account inside BanProof revokes our token and deletes our copy of it as well.
Your rights
You may access, correct, or delete your personal data at any time. Contact legal@banproof.io.
Children
BanProof AI is not directed to individuals under 13. We do not knowingly collect data from children.